ZeqDigitalForensics

Digital forensics evidence acquisition. Disk imaging with Zeqond hash chains, file carving, timeline reconstruction, chain-of-custody logging.

Endpoint	POST /api/forensics/digital
Auth	api-key
Rate limit	10/min
Category	forensics

Parameters

Name	Type	Required	Description
evidenceSource	object	Yes	{ type: 'disk'|'memory'|'network', reference }
analysis	string	No	'acquisition', 'carving', 'timeline', 'keyword'.

Returns

{ artifacts, timeline, hashChain, chainOfCustody, zeqond }

Example

curl -sS -X POST \
  -H "Authorization: Bearer zsm_..." \
  -H "Content-Type: application/json" \
  -d '{
  "evidenceSource": {},
  "analysis": "timeline"
}' \
  "https://zeqsdk.com/api/forensics/digital"

This protocol is a named building block — one of the operations you compose inside a state contract. Call it directly with the request above, or invoke it from a contract that fires on your machine's clock. Browse the whole library at GET /api/protocols; fetch this one at GET /api/protocols/zeq-digital-forensics.